#dev 2020-04-13

2020-04-13 UTC
strugee, KartikPrabhu, oedmarap, shimmy1996 and [LewisCowles] joined the channel
#
[LewisCowles]
jamietanna++
#
Loqi
jamietanna has 12 karma in this channel over the last year (33 in all channels)
#
[LewisCowles]
> what sort of socialisation is required to let them know?
#
[LewisCowles]
firefox++ for json viewer, which I occasionally wish I could turn off
#
Loqi
firefox has 2 karma over the last year
#
KartikPrabhu
I thought there was a thing to view the raw json no?
#
jacky
yeah right-click + view source
#
KartikPrabhu
there is a little thing on top that shows "raw data"
#
KartikPrabhu
at least in my FF
#
KartikPrabhu
it also has a thing to show headers
#
jacky
yeah same
beko and petermolnar joined the channel
#
dansup
!tell [snarfed] those bugfix PRs should be deployed to pixelfed.social tomorrow :)
#
Loqi
Ok, I'll tell them that when I see them next
[prtksxna] joined the channel
#
[LewisCowles]
damn... so it does 😊
#
jacky
it's not very explicit :)
#
[LewisCowles]
I'm just blind Jacky
#
[LewisCowles]
I need those new-style sales buttons which are huge to read some of the web
#
[LewisCowles]
I think contrast plays a part too
Ruxton joined the channel
#
aaronpk
[snarfed] can i use bridgy with two twitter accounts connected to the same website? I don't see anything in the FAQ about that
gRegorLove__, KartikPrabhu, dmitry, nickodd, [LewisCowles], swentel, deathrow1, [prtksxna], [grantcodes], [jgmac1106] and loicm joined the channel
#
beko
Cloudflare is eating Webmentions. Don't be like Cloudflare! Use a decent provider.
#
Zegnat
Huh?!
#
beko
https://beko.famkos.net/wp-content/uploads/2020/04/gnome-shell-screenshot-3ZV0I0.png that's all I get. Tried curl and even a "real browser" (FF)
#
Zegnat
Huh. Odd.
#
Zegnat
Wonder what security policy that is.
#
beko
Website in question is https://gergolippai.com/ - owner just installed Webmentions so I was giving it a shot. Informed owner via Mastodon. Let's see.
#
Zegnat
What are you using to send webmentions?
#
Zegnat
I know some people have gotten caught by filters that do not allow requests without User-Agent strings, for instance.
#
beko
Usually WordPress but in this case I sent it manually because my Mention is from last week when this endpoint didn't exist yet. So in this case curl and now a full featured Firefox. No dice.
#
beko
I've static IPs and I'm not on any known block lists with any. Cloudflare is simply breaking the web again.
#
Zegnat
May be Cloudflare, may be specific settings. I forget what the security extension for Apache is called (mod_secure?) but that has also sometimes blocked things like this
#
beko
It is Cloudflare according to header data.
#
Zegnat
Sure, but I can’t imagine this is the first indieweb website behind Cloudflare (though maybe it is?) so I wouldn’t be surprised if it is a specific security policy they enabled
#
Zegnat
Turns out people usually have security policies enabled that block things they actually want to allow ;)
#
Zegnat
What is mod_security?
#
Loqi
mod_security is a web application firewall for the Apache web server https://indieweb.org/mod_security
#
beko
I'll keep you posted but I'd simply guess it's a new ruleset.
#
Zegnat
Apache << [[mod_security]]
[LewisCowles] joined the channel
#
beko
I keep running into problems thanks to Cloudflare that I stopped bothering with it for my own stuff. Just making an exception here because it's a new installation made because I poked the owner.
#
Zegnat
If you figure it out, please put it on the wiki, beko :) There will probably be more people running into htat
#
beko
sure
#
beko
Why would anyone filter on User-Agent btw? Isn't that kinda pointless?
#
Zegnat
Twitter for a while used to make it harder for empty user-agents to reach some URLs
#
Zegnat
Probably just to block curl and certain bots, setting the UA to Firefox (or even to whatever, I think) would bypass that
#
Zegnat
anti-random-script-ddos? Who knows
#
beko
Well I just tried with agent for IE11 and used another IP of mine. No dice.
#
Zegnat
Interesting
#
Zegnat
I wonder if there might be some special filter for /wp-json/ URLs. I can imagine that being something that gets constantly hammered by vulnerability scans
#
beko
possible. I wrote some myself for a huge local publisher that uses WP fed by internal CMS
#
[LewisCowles]
@beko, can you try it in a browser, like firefox or chrome and copy as curl?
#
[LewisCowles]
I find it helps to have a real browser request and then delete properties
#
[LewisCowles]
rather than adding one at a time
#
[LewisCowles]
only if the browser is successful
#
beko
I did and the browser is not successful.
#
[LewisCowles]
if it's not then it's just CloudFlare being awful
#
[LewisCowles]
Ah, then they should not be able to offer their awful service
#
[LewisCowles]
step 1 of an internet service is to be transparent
#
[LewisCowles]
theirs started offering people a way to get around being negligent with handling load. Now years later they admit there is more to keeping a site up.
#
Zegnat
My bet is still on some WordPress specific security policy having been turned on, possibly related to /wp-json/, that is now coming back to bite.
#
beko
Maybe. I hate to dig into WordPress internals. Blaming any of the both is a low hanging fruit xD
#
Zegnat
!tell aaronpk what is the requirement for showing the “next” button at the bottom of a feed? I see it for https://aaronparecki.com/tag/nintendoswitch even though there are no more posts
#
Loqi
Ok, I'll tell them that when I see them next
#
Zegnat
Maybe. But if you are seeing it in your normal browser, something else is probably amiss.
#
Zegnat
adds to his bet that it has to do with the request being a POST request
#
[LewisCowles]
[Zegnat] @beko surely webmention shouldn't be touching internal WordPress /wp-json/ endpoints?
#
Zegnat
The webmention endpoint is made available through /wp-json/
#
GWG
It is a custom endpoint.
#
Zegnat
Oh no, it is like Betelgeuse, we said the word WordPress too often and summoned GWG :D
#
Zegnat
waves at GWG
#
GWG
I was actually here, but yes, you made my phone go ding
#
beko
sorry :>
#
[LewisCowles]
could experiment with URL rewrite to try to test that theory
#
beko
Zegnat: I tried GET too :)
#
beko
also now that python snippet. still 403
#
[LewisCowles]
i.e. on the server, try to get the author to intercept /api/webmention and change the path to /wp-json/webmention/1.0/endpoint
#
Zegnat
If we have the author on board, they may just be able to check what policies are turned on in CF ;)
#
beko
agreed. I'll go enjoying the sunny day now and see what comes back from the owner :)
#
[LewisCowles]
There is an article top of Google suggesting whitelisting /wp-json/
#
GWG
It's not sunny here, alas. But I have my light therapy lamp
#
Zegnat
We have some sun here, but temperature in the single digits and a lot of cold sea wind blowing in :(
#
GWG
Ah, weather talk
#
Zegnat
Probably more for #indieweb-chat, haha :D
#
Zegnat
How are the weather APIs going, GWG?
#
GWG
Did you read my post?
#
GWG
I went through a lot of choices
#
Zegnat
Think I missed that :o
#
Zegnat
“Did you know a millbar and a hectopascal are essentially the same thing?” - I did not! Ha
#
Zegnat
I feel like there were a number of EU national weather services that follow the Met’s API design. If that is right, you may have an easier time adding more countries beside the UK
#
GWG
Any in particular?
#
Zegnat
I thought the Netherlands did, but I can’t find it right now
#
Zegnat
Nope, can’t find it, darn :(
#
GWG
Zegnat: Any ideas on interesting things to do with my 2 PWSes?
#
Zegnat
Change your website theme depending on weather?
geoffo joined the channel
#
aaronpk
Zegnat: My site doesn't load the next page of results so it doesn't know whether or not there are any, so it always shows the next link
#
Loqi
aaronpk: Zegnat left you a message 1 hour, 12 minutes ago: what is the requirement for showing the “next” button at the bottom of a feed? I see it for https://aaronparecki.com/tag/nintendoswitch even though there are no more posts
#
aaronpk
I would have to run that query and use the result to decide whether to show the link
#
Zegnat
Understood :) Just thought I would make sure there wasn’t some bug rearing its head
jjuran joined the channel
#
GWG
Zegnat: first want to show it as a widget instead of the one for LaGuardia Airport, the nearest National Weather Service station
gxt, [prtksxna], [Suw] and [snarfed] joined the channel
#
[snarfed]
aaronpk re multiple bridgy accounts w/same domain, backfeed will work fine
#
[snarfed]
publish won't unless you distinguish them by path, since it needs to choose an account to publish a given URL
#
aaronpk
👍 thanks!
fibonacchoz, loicm, [Michael_Beckwi], gRegorLove__, [bonkerfield], nickodd, KartikPrabhu, [snarfed] and [KevinMarks] joined the channel; nickodd left the channel
#
[KevinMarks]
The Met Office's choices for forecast locations are a bit eccentric
[grantcodes], swentel, [jgmac1106] and gxt joined the channel
#
GWG
[KevinMarks]: Do you have one?
jamietanna joined the channel
#
jamietanna
Are there any Micropub clients aside from Micropublish that allow for editing posts via URL? Trying to debug it not working and wondering if I've misimplemented or not
#
jamietanna
(preferably web-based / Linux friendly)
#
swentel
hmm not that I know off
#
sknebel
quill afaik does at some hidden url? (aaronpk?)
#
jamietanna
Ooh so it looks like using the Edit button in Micropublish fails, but Edit All works - it seems to retrieve the data now
#
jamietanna
I found https://github.com/aaronpk/Quill/blob/b2a1b6c9d6544708d5092ae47810766eece04c19/controllers/controllers.php#L159-L164 but I'm not entirely sure if that is what I'm looking for on Quill (also I'm not sure I can use Quill due to https://github.com/aaronpk/Quill/issues/117
#
swentel
mmm that's inside the /favorite controller, so probably something else :)
#
swentel
hmm there's /edit though
#
swentel
line 792
#
swentel
so I think it should work with /edit?url=>{url}
#
swentel
been a while since did laravel, so could be wrong though
#
aaronpk
it only works for a couple kinds of posts, it's not very well implemented
#
swentel
yeah, it's tricky stuff
#
swentel
been holding that part off since ages in the android client too
#
swentel
I basically only use it to publish or unpublish posts hehe
#
swentel
(oh it's not laravel, but something diff, that aside)
#
swentel
in the meantime, Dries has finally gotten microformats on his site :)
#
swentel
his next step is webmentions
[KevinMarks] joined the channel
#
jamietanna
Ah, no worries
#
jamietanna
That's exciting, swentel!
#
[KevinMarks]
I'm between 2 or 3 forecast locations that are opposite sides of the hill I live on
#
[KevinMarks]
I should make lightsky.uk find your closest UK point
#
GWG
Lightsky?
#
[KevinMarks]
That's me using met Office data
#
GWG
[KevinMarks]: What about PWSes?
#
GWG
Met Office doesn't do them, but there are sources for that
sscarfe and jacky joined the channel
#
jmac
Moving over from the main channel... a little bird tells me that the west coast meetups have had issued with zoom bombing
#
jmac
Are there best practices we're following to avoid this, more recently?
#
jmac
oops, this isn't meta. IGNORE
[schmarty] and [LewisCowles] joined the channel
#
[KevinMarks]
The bit of darksky I use is the forecast, though I may try and get the rain overlays from the met office too
#
[LewisCowles]
is there an open forecasting modelling or prediction software? I thought it took a significant amount of skills and effort for those that produce. PWSes might make that part harder, needing to join clubs to get the modelling done
[snarfed] joined the channel
#
[LewisCowles]
not even sure if it's beyond an amateur
#
[KevinMarks]
The Met Office spend a lot on supercomputers
#
[LewisCowles]
this was some thinking, although I began to doubt myself that the met office did so I was cautious
[bonkerfield] and dmitry joined the channel
#
[LewisCowles]
I do wonder if it's intrinsic to understanding a local planetary feature like weather; the need to use a super-computer, or if it's simply the stage of understanding we have not giving us large enough blocks
#
[LewisCowles]
processes++
#
Loqi
processes has 1 karma over the last year
#
[KevinMarks]
It's very obvious that dark sky's rain projections don't take terrain into account
#
Loqi
Ok, I'll tell them that when I see them next
#
[KevinMarks]
I think you could train a neural net on weather for particular locations and it could infer terrain.
[grantcodes] joined the channel
#
[grantcodes]
RE edit support, I'm hoping to get a new version of the PostrChild browser extension out soon, that has really good edit support. But might require a bit of messing around to get it working really well.
#
[grantcodes]
And together can edit more basic stuff, but I've not added a way to pass in a url manually 🤔 Maybe one for the future too
#
jamietanna[m]
[grantcodes] thanks, looking forward to PostrChild. For Together, do you for instance need to support https://github.com/indieweb/micropub-extensions/issues/4 ?
#
Loqi
[EdwardHinkle] #4 Query for Post List
#
[grantcodes]
jamietanna: Yeah there is a view to list your own posts via micropub queries, then you can update them from there in together
#
[LewisCowles]
KevinMarks, does it need to be that complex?
#
[LewisCowles]
I mean for 100% accuracy it could get immensely complex
#
[LewisCowles]
but for better than guessing, 80-90% accurate, Michael Fish level reporting (I'm mostly joking using him, I've heard he's good), maybe they simply use a weighted map for simple math for elevation
#
jamietanna[m]
Cool, I was going to implement that soon, so with that done I can then use Together for edits, too! My main use case, tbh, is updating my posts' syndication links after a post has actually syndicated
#
jamietanna[m]
(which would be one of my own services as a Micropub client, not any of the existing ones)
#
[LewisCowles]
if I undersood KevinMarks point correctly, elevation could affect rainfall in some way (failing to think of other ways terrain could affect but elevation).
#
[grantcodes]
Oh yeah I'm pretty sure updating syndication links isn't supported in together, but might work in postrchild, I've not explicitly tested that yet
#
[KevinMarks]
It's pretty clear that what darksky does is pretty much derive motion vectors for current rainfall and move it over. A bit like mp4 p frames
#
[KevinMarks]
Whereas if you look at it (especially in the UK where there's a lot of elevation and coastline effects) you can intuit what is more likely to happen.
[Cheuk] joined the channel
#
Loqi
[Cheukting] #6807 Enable Webmentions
[Michael_Beckwi] joined the channel
#
aaronpk
[Cheuk]++ nice!
#
Loqi
[Cheuk] has 1 karma over the last year
#
aaronpk
Now what would that look like.. the idea is the syndicated post would send webmentions back to the canonical on your website. So that means your website would need a syndication link to the dev.to copy
#
aaronpk
and then I suppose each comment on dev.to would need a permalink that linked to your canonical version
#
aaronpk
I guess that first one isn't strictly needed
#
aaronpk
Tho possibly nice to have so dev.to has confirmation that you want to receive those webmentions so it can't be used to spam others